New Zealand’s 2026–2027 Cyber Security Action Plan Sets Out 15 Government Initiatives
Summary
New Zealand’s two-year cyber security action plan outlines 15 government initiatives, including centralized incident reporting, critical infrastructure resilience, stronger government security standards, quantum-resistant cryptography, and international partnerships.
Key points
- The plan sets out 15 initiatives for the New Zealand Government to deliver over the next two years.
- It proposes a single point for cyber incident reporting to improve data quality and access to response and recovery support.
- Measures include practical cyber resilience guidance for critical infrastructure operators and consultation on possible regulatory proposals.
- The plan calls for stronger and more consistent security standards in government procurement and design, and the ability to manage quantum-resistant cryptographic material.
- It proposes advice on incentives to protect personal information and a potential offence concerning the knowing handling of illegally obtained personal information.
- The government plans to manage public-service use of high-risk vendors, services, and products, and to expand collaboration with cyber security industry partners.
- The plan says it will be reviewed regularly and updated as the threat environment and technologies change.
Article Details
- Publisher
- New Zealand Government
- Report Period
- 2026–2027
- Scope
- Government actions to improve New Zealand's cyber security and resilience.
- Key Statistics
- The Action Plan sets out 15 initiatives across four areas: Understand, Prevent and Prepare, Respond, and Partner.
- The Government says it will deliver the initiatives over the next two years.
- Recommendations
- Establish a single point for cyber incident reporting and provide critical infrastructure operators with practical resilience guidance.
- Develop options to improve critical infrastructure security and strengthen security standards in government digital procurement and design.
- Prepare to process and manage quantum-resistant cryptographic material for sensitive information.
- Manage public service use of high-risk vendors, services, and products to reduce risks to government-held data.
- Expand NCSC collaboration with cyber security industry partners to prevent, detect, and respond to malicious cyber activity.